{"id":88992,"date":"2020-07-17T07:42:02","date_gmt":"2020-07-17T05:42:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/wapiti-proverka-sajta-na-uyazvimosti-svoimi-silami"},"modified":"2020-07-17T07:42:02","modified_gmt":"2020-07-17T05:42:02","slug":"wapiti-proverka-sajta-na-uyazvimosti-svoimi-silami","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/wapiti-proverka-sajta-na-uyazvimosti-svoimi-silami","title":{"rendered":"Wapiti \u2014 kontrollimi i faqes p\u00ebr vulnerabilitete me forcat e tyre","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Wapiti \u2014 kontrollimi i faqes p\u00ebr vulnerabilitete me forcat e tyre\" src=\"\/wp-content\/uploads\/2020\/07\/c52b58a326ba424d73a93614818c82f5.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nN\u00eb t\u00eb kaluar\u00ebn <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/news\/t\/507776\/\">artikulli yn\u00eb<\/a><\/noindex> Ne kemi folur p\u00ebr <strong>Nemesida WAF Free<\/strong> \u2014 nj\u00eb mjet falas p\u00ebr mbrojtjen e faqeve t\u00eb internetit dhe API-ve nga sulmet e hackereve, dhe n\u00eb k\u00ebt\u00eb rast kemi vendosur t\u00eb japim nj\u00eb rishikim t\u00eb skanerit t\u00eb njohur t\u00eb dob\u00ebsive <noindex><a rel=\"nofollow\" href=\"https:\/\/wapiti.sourceforge.io\/\">Wapiti<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p>Skandimi i faqes p\u00ebr dob\u00ebsi \u00ebsht\u00eb nj\u00eb mas\u00eb e nevojshme, e cila, n\u00eb bashk\u00ebpunim me analiz\u00ebn e kodit burimor, lejon vler\u00ebsimin e nivelit t\u00eb siguris\u00eb nga k\u00ebrc\u00ebnimet e kompromentimit. Mund t\u00eb kryhet skanimi i burimeve duke p\u00ebrdorur mjete t\u00eb specializuara.<\/p>\n<p><\/p>\n<p>Nikto, W3af (i shkruar n\u00eb Python 2.7, mb\u00ebshtetjeja p\u00ebr t\u00eb ka mbaruar) ose Arachni (nuk mb\u00ebshtetet m\u00eb q\u00eb nga shkurt) \u2014 jan\u00eb zgjidhjet m\u00eb t\u00eb njohura t\u00eb disponueshme n\u00eb segmentin falas. Sigurisht, ka edhe t\u00eb tjera, si Wapiti, mbi t\u00eb cilin kemi vendosur t\u00eb fokusohemi.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3 id=\"wapiti-rabotaet-so-sleduyuschimi-tipami-uyazvimostey\">Wapiti punon me llojet e m\u00ebposhtme t\u00eb dob\u00ebsive:<\/h3>\n<p><\/p>\n<ul>\n<li>zbrazja e skedar\u00ebve (lokale dhe t\u00eb larg\u00ebta, fopen, readfile);<\/li>\n<li>injeksione (PHP \/ JSP \/ ASP \/ injeksione SQL dhe injeksione XPath);<\/li>\n<li>XSS (skrimting nd\u00ebrfaqe t\u00eb kryq\u00ebzuara) (reflekse dhe permanente);<\/li>\n<li>zbulesa dhe ekzekutimi i komandave (eval (), system (), passtru ());<\/li>\n<li>injeksione CRLF (ndarja e p\u00ebrgjigjeve HTTP, fiksa e seanc\u00ebs);<\/li>\n<li>XXE (injeksion i entitetit t\u00eb jasht\u00ebm XML);<\/li>\n<li>SSRF (falsifikimi i k\u00ebrkes\u00ebs n\u00eb an\u00ebn e serverit);<\/li>\n<li>p\u00ebrdorimi i skedar\u00ebve potencialisht t\u00eb rreziksh\u00ebm t\u00eb njohur (fal\u00eb baz\u00ebs s\u00eb t\u00eb dh\u00ebnave Nikto);<\/li>\n<li>konfigurime t\u00eb dob\u00ebta .htaccess q\u00eb mund t\u00eb kalohen;<\/li>\n<li>prania e skedar\u00ebve t\u00eb kopjimit rezerv\u00eb q\u00eb zbulojn\u00eb informacion t\u00eb ndjesh\u00ebm (zbrazja e kodit burimor);<\/li>\n<li>Shellshock;<\/li>\n<li>redirigjime t\u00eb hapura;<\/li>\n<li>metoda t\u00eb pazakonta HTTP q\u00eb mund t\u00eb lejohet (PUT).<\/li>\n<\/ul>\n<p><\/p>\n<h4 id=\"vozmozhnosti\">Mund\u00ebsit\u00eb:<\/h4>\n<p><\/p>\n<ul>\n<li>mb\u00ebshtetje p\u00ebr proxy HTTP, HTTPS dhe SOCKS5;<\/li>\n<li>autentikimi me metoda t\u00eb ndryshme: Basic, Digest, Kerberos ose NTLM;<\/li>\n<li>mund\u00ebsia p\u00ebr t\u00eb kufizuar fush\u00ebn e skanimit (domain, dosje, faqe, URL);<\/li>\n<li>fshirja automatike e nj\u00ebrit prej parametrave n\u00eb URL;<\/li>\n<li>masa t\u00eb shumta paraprake kund\u00ebr rrethit t\u00eb pafund t\u00eb skanimit (shembuj: ifor, kufizimi i vlerave p\u00ebr parametrin);<\/li>\n<li>mund\u00ebsia p\u00ebr t\u00eb vendosur prioritet p\u00ebr shqyrtimin e URL-ve (edhe n\u00ebse nuk jan\u00eb n\u00eb fush\u00ebn e skanimit);<\/li>\n<li>mund\u00ebsia p\u00ebr t\u00eb p\u00ebrjashtuar disa URL nga skanimi dhe sulmet (p.sh.: URL logout);<\/li>\n<li>importimi i skedar\u00ebve t\u00eb cookie-s\u00eb (marrja e tyre p\u00ebrmes mjetit wapiti-getcookie);<\/li>\n<li>mund\u00ebsia p\u00ebr t\u00eb aktivizuar \/ \u00e7aktivizuar verifikimin e certifikatave SSL;<\/li>\n<li>mund\u00ebsia p\u00ebr t\u00eb nxjerr\u00eb URL nga JavaScript (nj\u00eb interpreter shum\u00eb i thjesht\u00eb JS);<\/li>\n<li>bashk\u00ebpunimi me HTML5;<\/li>\n<li>disa disa m\u00ebnyra p\u00ebr t\u00eb menaxhuar sjelljen dhe kufizimet e crawler-it;<\/li>\n<li>vendosja e koh\u00ebs maksimale p\u00ebr procesin e skanimit;<\/li>\n<li>shtimi i disa titujve HTTP t\u00eb personalizuar ose konfiguroja e User-Agent-it t\u00eb personalizuar.<\/li>\n<\/ul>\n<p><\/p>\n<h4 id=\"dopolnitelnye-vozmozhnosti\">Karakteristika t\u00eb tjera:<\/h4>\n<p><\/p>\n<ul>\n<li>krijimi i raporteve t\u00eb dob\u00ebsive n\u00eb formate t\u00eb ndryshme (HTML, XML, JSON, TXT);<\/li>\n<li>pezullimi dhe rinisja e skanimit ose sulmit (mekanizmi i sesionit duke p\u00ebrdorur databaza SQLite3);<\/li>\n<li>thekson n\u00eb terminal p\u00ebr t\u00eb identifikuar dob\u00ebsin\u00eb;<\/li>\n<li>nivale t\u00eb ndryshme t\u00eb regjistrimit;<\/li>\n<li>nj\u00eb m\u00ebnyr\u00eb e shpejt\u00eb dhe e leht\u00eb p\u00ebr t\u00eb aktivizuar \/ \u00e7aktivizuar modulat e sulmit.<\/li>\n<\/ul>\n<p><\/p>\n<h3 id=\"ustanovka\">Instalimi<\/h3>\n<p><\/p>\n<p>Versioni aktual i Wapiti mund t\u00eb instalohet n\u00eb 2 m\u00ebnyra:<\/p>\n<p><\/p>\n<ul>\n<li>duke shkarkuar burimin nga zyrtarja <noindex><a rel=\"nofollow\" href=\"https:\/\/wapiti.sourceforge.io\/\">the site<\/a><\/noindex> dhe duke ekzekutuar skriptin e instalimit, pas instalimit t\u00eb Python3;<\/li>\n<li>duke p\u00ebrdorur komand\u00ebn pip3 install wapiti3.<\/li>\n<\/ul>\n<p><\/p>\n<p>Pas k\u00ebsaj, Wapiti do t\u00eb jet\u00eb gati p\u00ebr t'u p\u00ebrdorur.<\/p>\n<p><\/p>\n<h3 id=\"rabota-s-instrumentom\">Puna me mjetin<\/h3>\n<p><\/p>\n<p>P\u00ebr t\u00eb demonstruar funksionimin e Wapiti, do t\u00eb p\u00ebrdorim nj\u00eb platform\u00eb t\u00eb p\u00ebrgatitur posa\u00e7\u00ebrisht sites.vulns.pentestit.ru (burim i brendsh\u00ebm), q\u00eb p\u00ebrmban dob\u00ebsi t\u00eb ndryshme (Injection, XSS, LFI\/RFI) dhe mang\u00ebsi t\u00eb tjera t\u00eb aplikacioneve web. <\/p>\n<p><\/p>\n<p><strong>Informacioni ofrohet ekskluzivisht p\u00ebr q\u00ebllime edukative. Mos shkelni ligjin!<\/strong><\/p>\n<p><\/p>\n<p>Komanda baz\u00eb p\u00ebr t\u00eb nisur skanerin:<\/p>\n<p><\/p>\n<pre><code class=\"bash\"># wapiti -u &lt;target&gt; &lt;options&gt;<\/code><\/pre>\n<p><\/p>\n<p>N\u00eb k\u00ebt\u00eb m\u00ebnyr\u00eb, ka nj\u00eb ndihm\u00eb mjaft t\u00eb detajuar me nj\u00eb num\u00ebr t\u00eb madh opsionesh p\u00ebr nisjen, p\u00ebr shembull:<\/p>\n<p><\/p>\n<p><strong>\u2014sfera<\/strong> \u2014 fusha e aplikimit<br \/>\nN\u00ebse s\u00eb bashku me URL-n\u00eb p\u00ebr skanimin tregoni parametrin scope, mund t\u00eb rregulloni fush\u00ebn e skanimit t\u00eb site-it, duke treguar si nj\u00eb faqe t\u00eb ve\u00e7ant\u00eb ashtu edhe t\u00eb gjitha faqet q\u00eb mund t\u00eb gjenden n\u00eb site.<\/p>\n<p><\/p>\n<p><strong>-s<\/strong> dhe <strong>-x<\/strong> \u2014 parametrat p\u00ebr shtimin ose heqjen e URL-ve t\u00eb caktuara. K\u00ebto parametra jan\u00eb t\u00eb dobish\u00ebm kur duhet t\u00eb shtoni ose hiqni nj\u00eb URL t\u00eb caktuar n\u00eb procesin e skanimit.<\/p>\n<p><\/p>\n<p><strong>\u2014evito<\/strong> \u2014 parametri i specifikuar me k\u00ebt\u00eb \u00e7el\u00ebs do t\u00eb skanohet, por nuk do t\u00eb sulmohet. E dobishme, n\u00ebse ka ndonj\u00eb parametrat t\u00eb rreziksh\u00ebm q\u00eb \u00ebsht\u00eb m\u00eb mir\u00eb t\u00eb p\u00ebrjashtohen gjat\u00eb skanimit.<\/p>\n<p><\/p>\n<p><strong>\u2014verifiko-ssl<\/strong> \u2014 aktivizimi ose \u00e7aktivizimi i verifikimit t\u00eb certifikat\u00ebs.<br \/>\nSkaneri Wapiti \u00ebsht\u00eb modular. Megjithat\u00eb, p\u00ebr t\u00eb nisur module t\u00eb ve\u00e7anta nga ato q\u00eb lidhen automatikisht gjat\u00eb pun\u00ebs s\u00eb skaneri, duhet t\u00eb p\u00ebrdorni \u00e7el\u00ebsin -m dhe t\u00eb renditni ato q\u00eb nevojiten n\u00ebp\u00ebrmjet presjes. N\u00ebse \u00e7el\u00ebsi nuk p\u00ebrdoret, t\u00eb gjith\u00eb modul\u00ebt do t\u00eb jen\u00eb aktiv\u00eb si parazgjedhje. N\u00eb variantin m\u00eb t\u00eb thjesht\u00eb do t\u00eb duket si m\u00eb posht\u00eb:<\/p>\n<p><\/p>\n<pre><code class=\"bash\"># wapiti -u http:\/\/sites.vulns.pentestit.ru\/ -m sql,xss,xxe<\/code><\/pre>\n<p><\/p>\n<p>Ky ky\u00e7 p\u00ebrdorimi do t\u00eb thot\u00eb se ne do t\u00eb p\u00ebrdorim vet\u00ebm modulet SQL, XSS dhe XXE gjat\u00eb skanimit t\u00eb objektivit. P\u00ebrve\u00e7 k\u00ebsaj, \u00ebsht\u00eb e mundur t\u00eb filtrohet puna e modulit n\u00eb var\u00ebsi t\u00eb metod\u00ebs s\u00eb k\u00ebrkuar. P\u00ebr shembull <strong>-m \u201cxss: get, blindsql: post, xxe: post\u201d<\/strong>. N\u00eb k\u00ebt\u00eb rast, moduli <strong>xss<\/strong> do t\u00eb aplikohet n\u00eb k\u00ebrkesat e d\u00ebrguara me metod\u00ebn GET, nd\u00ebrsa moduli <strong>blibdsql<\/strong> do t\u00eb p\u00ebrdoret p\u00ebr k\u00ebrkesat POST dhe k\u00ebshtu me radh\u00eb. P\u00ebr m\u00eb tep\u00ebr, n\u00ebse ndonj\u00eb modul q\u00eb ishte p\u00ebrfshir\u00eb n\u00eb list\u00eb nuk nevojitet gjat\u00eb skanimit ose punon shum\u00eb gjat\u00eb, duke shtypur kombinimin Ctrl+C mund t\u00eb anashkaloni p\u00ebrdorimin e modulit aktual, duke zgjedhur pik\u00ebn p\u00ebrkat\u00ebse n\u00eb menun\u00eb interaktive.<\/p>\n<p><\/p>\n<p>Wapiti mb\u00ebshtet d\u00ebrgimin e k\u00ebrkesave p\u00ebrmes nj\u00eb proxy me ndihm\u00ebn e \u00e7el\u00ebsit <strong>-p<\/strong> dhe autentikimin n\u00eb faqen e synuar p\u00ebrmes parametrave <strong>-a<\/strong>. Gjithashtu, mund t\u00eb specifikoni llojin e autentikimit: <strong>Basi\u00e7<\/strong>, <strong>Digest<\/strong>, <strong>Kerberos<\/strong> dhe <strong>NTLM<\/strong>. P\u00ebr dy t\u00eb fundit, mund t\u00eb nevojitet instalimi i moduleve shtes\u00eb. P\u00ebrve\u00e7 k\u00ebsaj, \u00ebsht\u00eb e mundur t\u00eb vendosni \u00e7do titull n\u00eb k\u00ebrkesa (p\u00ebrfshir\u00eb ndonj\u00eb <strong>User-Agent<\/strong>) dhe shum\u00eb gj\u00ebra t\u00eb tjera.<\/p>\n<p><\/p>\n<p>P\u00ebr t\u00eb p\u00ebrdorur autentikimin, mund t\u00eb p\u00ebrdorni mjetin <strong>wapiti-getcookie<\/strong>. Me ndihm\u00ebn e tij, ne formojm\u00eb <strong>cookie<\/strong>, t\u00eb cilat Wapiti do t\u00eb p\u00ebrdor\u00eb gjat\u00eb skanimit. Formimi <strong>cookie<\/strong> realizohet me ndihm\u00ebn e komand\u00ebs:<\/p>\n<p><\/p>\n<pre><code class=\"bash\"># wapiti-getcookie -u http:\/\/sites.vulns.pentestit.ru\/login.php -c cookie.json<\/code><\/pre>\n<p><\/p>\n<p>Gjat\u00eb pun\u00ebs n\u00eb modin interaktiv, p\u00ebrgjigjeni pyetjeve dhe jepni informacionin e nevojsh\u00ebm si: emri i p\u00ebrdoruesit, fjal\u00ebkalimi dhe t\u00eb tjera:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Wapiti \u2014 kontrollimi i faqes p\u00ebr vulnerabilitete me forcat e tyre\" src=\"\/wp-content\/uploads\/2020\/07\/1f858db74cd11b0837d0aeca890af816.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>N\u00eb dalje marrim nj\u00eb skedar n\u00eb formatin JSON. Nj\u00eb tjet\u00ebr mund\u00ebsi \u00ebsht\u00eb t\u00eb shtoni gjith\u00eb informacionin e nevojsh\u00ebm p\u00ebrmes parametrave <strong>-d<\/strong>:<\/p>\n<p><\/p>\n<pre><code class=\"bash\"># wapiti-getcookie - http:\/\/sites.vulns.pentestit.ru\/login.php -c cookie.json -d &quot;username=admin&amp;password=admin&amp;enter=submit&quot;<\/code><\/pre>\n<p><\/p>\n<p>Rezultati do t\u00eb jet\u00eb i ngjash\u00ebm:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Wapiti \u2014 kontrollimi i faqes p\u00ebr vulnerabilitete me forcat e tyre\" src=\"\/wp-content\/uploads\/2020\/07\/87e0923c3027bdda5f1ccf0d4e08a10f.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Duke shqyrtuar funksionalitetin kryesor t\u00eb skanerit, k\u00ebrkesa finale p\u00ebr kryerjen e testeve t\u00eb aplikacionit web n\u00eb rastin ton\u00eb ishte:<\/p>\n<p><\/p>\n<pre><code class=\"bash\"># wapiti --level 1 -u http:\/\/sites.vulns.pentestit.ru\/ -f html -o \/tmp\/vulns.html -m all --color -\u0441 cookie.json --scope folder --flush-session -A 'Pentestit Scans' -p http:\/\/proxy.office.pentestit.ru:3128<\/code><\/pre>\n<p><\/p>\n<p>ku midis parametrave t\u00eb tjer\u00eb:<\/p>\n<p><\/p>\n<p><strong>--follow<\/strong> dhe <strong>-o<\/strong> \u2014 formati dhe rruga p\u00ebr ruajtjen e raportit;<\/p>\n<p><\/p>\n<p><strong>-m<\/strong> \u2014 aktivizimi i t\u00eb gjith\u00eb moduleve \u2014 nuk rekomandohet, pasi do t\u00eb ndikoj\u00eb n\u00eb koh\u00ebn e testimit dhe madh\u00ebsin\u00eb e raportit;<\/p>\n<p><\/p>\n<p><strong>\u2014ngjyr\u00eb<\/strong> \u2014 t\u00eb theksoj\u00eb dob\u00ebsit\u00eb e gjetura n\u00eb var\u00ebsi t\u00eb r\u00ebnd\u00ebsis\u00eb s\u00eb tyre sipas versionit t\u00eb vet\u00eb Wapiti;<\/p>\n<p><\/p>\n<p><strong>-c<\/strong> \u2014 p\u00ebrdorimi i nj\u00eb skedari me <strong>cookie<\/strong>, t\u00eb gjeneruar me ndihm\u00ebn e <strong>wapiti-getcookie<\/strong>; <\/p>\n<p><\/p>\n<p><strong>\u2014sfera<\/strong> \u2014 zgjedhja e objektivit p\u00ebr sulm. Duke zgjedhur opsionin <strong>folder<\/strong> do t\u00eb skanohet dhe sulmohet \u00e7do URL, duke filluar nga baza. URL baz\u00eb duhet t\u00eb ket\u00eb nj\u00eb slash (pa emrin e skedarit);<\/p>\n<p><\/p>\n<p><strong>\u2014shkarko-sesionin<\/strong> \u2014 lejon p\u00ebrs\u00ebritjen e skanimit, n\u00eb t\u00eb cilin nuk do t\u00eb merren parasysh rezultatet e m\u00ebparshme;<\/p>\n<p><\/p>\n<p><strong>-A<\/strong> \u2014 e vetja <strong>User-Agent<\/strong>;<\/p>\n<p><\/p>\n<p><strong>-p<\/strong> \u2014 adresa e serverit proxy, n\u00ebse \u00ebsht\u00eb e nevojshme.<\/p>\n<p><\/p>\n<h3 id=\"nemnogo-ob-otchete\">Pak p\u00ebr raportin<\/h3>\n<p><\/p>\n<p>Rezultati i skanimit paraqitet n\u00eb form\u00ebn e nj\u00eb raporti t\u00eb detajuar p\u00ebr t\u00eb gjitha dob\u00ebsit\u00eb e gjetura n\u00eb formatin e nj\u00eb faqe HTML, n\u00eb nj\u00eb form\u00eb t\u00eb kuptueshme dhe t\u00eb leht\u00eb p\u00ebr t'u perceptuar. N\u00eb raport do t\u00eb p\u00ebrmenden kategori dhe numri i dob\u00ebsive t\u00eb gjetura, p\u00ebrshkrimi i tyre, k\u00ebrkesat, komandat p\u00ebr <strong>curl<\/strong> dhe k\u00ebshilla se si t'i mbyllni. P\u00ebr leht\u00ebsin\u00eb e navigimit, do t\u00eb shtohet nj\u00eb lidhje n\u00eb titujt e kategorive, duke klikuar mbi t\u00eb cilat mund t\u00eb kaloni tek ajo:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Wapiti \u2014 kontrollimi i faqes p\u00ebr vulnerabilitete me forcat e tyre\" src=\"\/wp-content\/uploads\/2020\/07\/39d35304b6f2ea20fd9096e167daabd5.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Nj\u00eb mang\u00ebsi e konsiderueshme e raportit \u00ebsht\u00eb mungesa e nj\u00eb harta t\u00eb till\u00eb t\u00eb aplikacionit web, pa t\u00eb cil\u00ebn nuk do t\u00eb jet\u00eb e qart\u00eb, n\u00ebse t\u00eb gjitha adresat dhe parametrat jan\u00eb analizuar. Gjithashtu, ekziston mund\u00ebsia e rreziqeve t\u00eb gabuara. N\u00eb rastin ton\u00eb, raporti p\u00ebrfshin 'skedar\u00eb backup' dhe 'skedar\u00eb potencialisht t\u00eb rreziksh\u00ebm'. Numri i tyre nuk p\u00ebrputhet me realitetin, pasi skedar\u00ebt e till\u00eb nuk ishin n\u00eb server:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Wapiti \u2014 kontrollimi i faqes p\u00ebr vulnerabilitete me forcat e tyre\" src=\"\/wp-content\/uploads\/2020\/07\/09c6f8945e6fb6dc6de1388f71fc96bb.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Ndoshta, modul\u00ebt q\u00eb funksionojn\u00eb gabim do t\u00eb korrigjohen me kalimin e koh\u00ebs. Nj\u00eb tjet\u00ebr mang\u00ebsi e raportit \u00ebsht\u00eb mungesa e ngjyrave p\u00ebr dob\u00ebsit\u00eb e gjetura (n\u00eb p\u00ebrputhje me kriticitetin e tyre), ose t\u00eb pakt\u00ebn ndarja e tyre sipas kategorive. E vetmja m\u00ebnyr\u00eb q\u00eb mund t\u00eb kuptojm\u00eb p\u00ebr kriticitetin e dob\u00ebsis\u00eb s\u00eb gjetur \u00ebsht\u00eb t\u00eb aplikojm\u00eb parametrin <strong>\u2014ngjyr\u00eb<\/strong> n\u00eb skanim dhe at\u00ebher\u00eb dob\u00ebsit\u00eb e gjetura do t\u00eb ngjyros\u00ebn me ngjyra t\u00eb ndryshme:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Wapiti \u2014 kontrollimi i faqes p\u00ebr vulnerabilitete me forcat e tyre\" src=\"\/wp-content\/uploads\/2020\/07\/46f4c34f9215117eeddd96db633e9e3e.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Por n\u00eb vet\u00eb raportin nj\u00eb ngjyrosje e till\u00eb nuk parashikohet.<\/p>\n<p><\/p>\n<h3 id=\"uyazvimosti\">Dob\u00ebsit\u00eb<\/h3>\n<p><\/p>\n<h4 id=\"sqli\">SQLi<\/h4>\n<p><\/p>\n<p>Skandari u p\u00ebrball me pjes\u00ebn e k\u00ebrkimit t\u00eb SQLi. Kur k\u00ebrkohen dob\u00ebsi SQL n\u00eb faqet ku nuk k\u00ebrkohet autentifikim, nuk ka probleme:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Wapiti \u2014 kontrollimi i faqes p\u00ebr vulnerabilitete me forcat e tyre\" src=\"\/wp-content\/uploads\/2020\/07\/f9ffef805a115c1a7d47c068a38794bf.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Nuk arrit\u00ebm t\u00eb gjejm\u00eb dob\u00ebsin\u00eb n\u00eb faqet q\u00eb aksesohen vet\u00ebm pas autentifikimit, madje edhe me p\u00ebrdorimin e validit <strong>cookie<\/strong>, sepse ndoshta pas autentifikimit t\u00eb suksessh\u00ebm do t\u00eb ndodhi \"dalja nga sesioni\" dhe <strong>cookie<\/strong> do t\u00eb b\u00ebheshin t\u00eb pavlefshme. N\u00ebse funksioni i deautentifikimit do t\u00eb ishte realizuar n\u00eb form\u00ebn e nj\u00eb skenari t\u00eb ve\u00e7ant\u00eb q\u00eb merret me p\u00ebrpunimin e k\u00ebsaj procedure, at\u00ebher\u00eb do t\u00eb ishte e mundur ta p\u00ebrjashtojm\u00eb plotesisht at\u00eb me parametrin -x, duke parandaluar k\u00ebshtu aktivizimin e tij. P\u00ebrndryshe, nuk do t\u00eb jet\u00eb e mundur t\u00eb p\u00ebrjashtohet p\u00ebrpunimi i tij. Kjo \u00ebsht\u00eb nj\u00eb problem i mjetit n\u00eb t\u00ebr\u00ebsi dhe jo i nj\u00eb moduli t\u00eb caktuar, por p\u00ebr shkak t\u00eb k\u00ebtij detaji nuk arrit\u00ebm t\u00eb zbulojm\u00eb disa injeksione n\u00eb zon\u00ebn private t\u00eb burimit.<\/p>\n<p><\/p>\n<h4 id=\"xss\">XSS<\/h4>\n<p><\/p>\n<p>Me detyr\u00ebn e caktuar, skaneri u p\u00ebrball me sukses dhe gjeti t\u00eb gjitha dob\u00ebsit\u00eb e p\u00ebrgatitura:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Wapiti \u2014 kontrollimi i faqes p\u00ebr vulnerabilitete me forcat e tyre\" src=\"\/wp-content\/uploads\/2020\/07\/ae43bf1f7d78224a5df5f2ef733f8203.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<h4 id=\"lfirfi\">LFI\/RFI<\/h4>\n<p><\/p>\n<p>Skeneri zbuloi t\u00eb gjitha vulnerabilitetet e instaluara:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Wapiti \u2014 kontrollimi i faqes p\u00ebr vulnerabilitete me forcat e tyre\" src=\"\/wp-content\/uploads\/2020\/07\/9056c7911237b607a6b12cc2e5a488d3.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>N\u00eb p\u00ebrgjith\u00ebsi, pavar\u00ebsisht rreziqeve false dhe humbjeve t\u00eb vulnerabiliteteve, Wapiti, si nj\u00eb mjet falas, tregon rezultate mjaft t\u00eb mira. \u00c7far\u00ebdo q\u00eb t\u00eb ndodhi, duhet t\u00eb pranojm\u00eb se skeneri \u00ebsht\u00eb mjaft i fuqish\u00ebm, fleksib\u00ebl dhe shum\u00ebfunksional, dhe m\u00eb e r\u00ebnd\u00ebsishmja \u2014 \u00ebsht\u00eb falas, prandaj meriton p\u00ebrdorim, duke ndihmuar administrator\u00ebt dhe zhvilluesit t\u00eb marrin informacion baz\u00eb mbi gjendjen e siguris\u00eb s\u00eb aplikacionit web.<\/p>\n<p><\/p>\n<p>Q\u00ebndroni t\u00eb sh\u00ebndetsh\u00ebm dhe t\u00eb sigurt!<\/p>\n<p>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/510998\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043c\u044b \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b\u0438 \u043e Nemesida WAF Free \u2014 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0441\u0430\u0439\u0442\u043e\u0432 \u0438 API \u043e\u0442 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0445 \u0430\u0442\u0430\u043a, \u0430 \u0432 \u044d\u0442\u043e\u0439 \u0440\u0435\u0448\u0438\u043b\u0438 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u043e\u0431\u0437\u043e\u0440 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0433\u043e \u0441\u043a\u0430\u043d\u0435\u0440\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Wapiti. \u0421\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0430\u0439\u0442\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u2014 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u0430\u044f \u043c\u0435\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u0432\u043a\u0443\u043f\u0435 \u0441 \u0430\u043d\u0430\u043b\u0438\u0437\u043e\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0446\u0435\u043d\u0438\u0442\u044c \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0435\u0433\u043e \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u043e\u0442 \u0443\u0433\u0440\u043e\u0437 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438. \u0412\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u0435\u0431-\u0440\u0435\u0441\u0443\u0440\u0441\u0430 \u043c\u043e\u0436\u043d\u043e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":88993,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-88992","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u0439\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/wapiti-proverka-sajta-na-uyazvimosti-svoimi-silami\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Wapiti \u2014 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0441\u0430\u0439\u0442\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0432\u043e\u0438\u043c\u0438 \u0441\u0438\u043b\u0430\u043c\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u0439\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/wapiti-proverka-sajta-na-uyazvimosti-svoimi-silami\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-07-17T05:42:02+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-07-17T05:42:02+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Wapiti \u2014 kontrolli i faqes p\u00ebr vulnerabilitete n\u00eb m\u00ebnyr\u00eb t\u00eb pavarur | ProHoster","description":"N\u00eb t\u00eb kaluar\u00ebn","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/wapiti-proverka-sajta-na-uyazvimosti-svoimi-silami","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Wapiti \u2014 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0441\u0430\u0439\u0442\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0432\u043e\u0438\u043c\u0438 \u0441\u0438\u043b\u0430\u043c\u0438 | ProHoster","og:description":"\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u0439","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/wapiti-proverka-sajta-na-uyazvimosti-svoimi-silami","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-07-17T05:42:02+00:00","article:modified_time":"2020-07-17T05:42:02+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"88992","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:45:41","updated":"2022-09-28 15:58:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/88992","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=88992"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/88992\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/88993"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=88992"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=88992"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=88992"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}